LDAP Injection Vulnerability in Liderahenk by TÜBİTAK BİLGEM
CVE-2026-19271

7.5HIGH

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Liderahenk
Vendor
CVE Published:
26 August 2026

What is CVE-2026-19271?

An LDAP Injection vulnerability exists in Liderahenk software developed by TÜBİTAK BİLGEM, allowing attackers to manipulate LDAP queries. This flaw poses significant risks, enabling unauthorized access to sensitive information or system commands when exploited. The vulnerable versions range from 3.4.0 to just before 3.5.5, highlighting the importance of upgrading to mitigate potential threats.

Affected Version(s)

Liderahenk 3.4.0 < 3.5.5

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Emre DOĞAN
.